CVE-2024-2418

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /view_order.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-256705 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Mar 13, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-241869.8Jsish v3.5.0 (commit 42c694c) was discovered to contain a stack-overflow via the component IterGetKeysCallback at /jsish/src/jsiValue.c.CVE-2024-241889.8Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c.CVE-2024-241899.8Jsish v3.5.0 (commit 42c694c) was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c.CVE-2024-24197.1A flaw was found in Keycloak's redirect_uri validation logic. This issue may allow a bypass of otherwise explicitly allowed hosts. A successCVE-2024-241929.1robdns commit d76d2e6 was discovered to contain a heap overflow via the component block->filename at /src/zonefile-insertion.c.CVE-2024-241947.5robdns commit d76d2e6 was discovered to contain a NULL pointer dereference via the item->tokens component at /src/conf-parse.c.CVE-2024-241957.5robdns commit d76d2e6 was discovered to contain a misaligned address at /src/zonefile-insertion.c.CVE-2024-241987.5smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/util.c.CVE-2024-241997.5smartdns commit 54b4dc was discovered to contain a misaligned address at smartdns/src/dns.c.CVE-2024-24209.8LenelS2 NetBox access control and event monitoring system was discovered to contain Hardcoded Credentials in versions prior to and includingCVE-2024-242029.8An arbitrary file upload vulnerability in /upgrade/control.php of ZenTao Community Edition v18.10, ZenTao Biz v8.10, and ZenTao Max v4.10 alCVE-2024-24219.8LenelS2 NetBox access control and event monitoring system was discovered to contain an unauthenticated RCE in versions prior to and includin
CVE-2024-2418: Critical severity, CVSS 9.8 | Vulnix